Remote Engineering Manager, Cloud & Security

VulnU; United States; Remote; USD 250,000 - 387,000; Full time

Benefits offered by this job

Paid parental leave

Flexible PTO

Retirement match

Equity

Job summary

Replit is seeking an Engineering Manager, Security to lead the teams securing our cloud, infrastructure, and code. You will manage Cloud & Infrastructure Security and Application Security & Secure SDLC groups across GCP, AWS, and Azure, driving remediation to meet SLA and compliance.

You will hire, mentor, and set strategy and roadmaps for vulnerability management and secure-by-default development. You will not handle incident response directly but will support IR with context, prioritization,

Qualifications

• 8+ years in security engineering, cloud security, or DevSecOps.
• Deep knowledge of cloud security across GCP, AWS, Azure.
• Proven track record running vulnerability management programs at scale.
• Experience with CSPM/CNAPP platforms and SCA/SAST/IaC scanning tools.
• Ability to write and review code or automation (Python, Go, TS).
• Familiar with security controls mapping to SOC 2, ISO 27001, PCI DSS, FedRAMP.

Responsibilities

• Lead cloud security, infrastructure vulnerability management, and application security engineers.
• Define multi-year roadmap and quarterly OKRs for security programs.
• Oversee remediation SLAs and compliance mapping to standards.
• Build automated workflows for finding routing, ownership, and SLA tracking.
• Run remediation reviews with leadership and manage risk acceptance processes.
• Partner with Compliance/GRC for audit-ready evidence and external audits.

Skills

Cloud security

Vulnerability management

Secure SDLC

Security leadership

DevSecOps

Tools

Snyk

Semgrep

CodeQL

Checkmarx

Socket

Dependabot

Checkov

tfsec

Job description

Replit is seeking an Engineering Manager, Security to lead the teams securing our cloud, infrastructure, and code. You will manage Cloud & Infrastructure Security and Application Security & Secure SDLC groups across GCP, AWS, and Azure, driving remediation to meet SLA and compliance.

You will hire, mentor, and set strategy and roadmaps for vulnerability management and secure-by-default development. You will not handle incident response directly but will support IR with context, prioritization,